Masto meta; urgent 

The Direct Messages on Masto are broken in a way that is potentially dangerous

It has happened more than once that someone has tried to contact me in my admin persona about another user using a "Direct" privacy toot

And they try to talk *about* the other person

But Masto helpfully auto-fills their name, so now they're *in* the conversation

And suddenly someone who absolutely should NOT be in a private conversation is added by accident

Follow

Masto meta; urgent 

@bgcarlisle So? Don't use the @ then or do a space. That's not a bug. As well as forgetting to set a message to direct instead of public.

ยท ยท Pinafore ยท 2 ยท 0 ยท 0

Masto meta; urgent 

@alsternerd @bgcarlisle User interfaces that lay traps for users are broken and need to be fixed.

It doesn't matter whether it's working "as intended", if the intent itself was flawed.

This isn't hard to fix, the hard part will be convincing the devs that their current design has bad enough side-effects that it should be reconsidered.

Masto meta; urgent 

@HerraBRE @bgcarlisle But what do you do IF you want to have that other person mentioned by intention?
How do you want to do that? adding a +@username@inst.ance ? Then it's easier to just let the @ go. Maybe the problem is only a client one.
Which is the UI you mean here, there are very different ones, the default web one, pinafore, some others as well as all the mobile clients. they all work different.

Masto meta; urgent 

@alsternerd @bgcarlisle Uhm. I refer you to your nearest e-mail client for a tried and tested design pattern that solves this.

This ain't rocket science.

Masto meta; urgent 

@HerraBRE @bgcarlisle Yeah, you get that you have separated fields in an email client and do not write your emails starting with "Hello @user@example.com, message".
Twitter, didn't have this too and this is by intention, maybe you want to use a different network like friendica then?

Masto meta; urgent 

@HerraBRE @bgcarlisle Following this, we can go back to have extra fields for adding tags, too. (I got no problem with that, but that whould change how these social networks work a lot and people don't use tab a lot to change input fields.)

Masto meta; urgent 

@alsternerd @bgcarlisle Telling people to just go use something else in response to a legit concern about UI design is very, very obnoxious.

Muting you now, have a nice day!

Masto meta; urgent 

@HerraBRE @bgcarlisle As I said you can CHANGE the UI you use, just use a different one.

Masto meta; urgent 

@alsternerd @HerraBRE @bgcarlisle one could simply not allow more than one @ user when set to direct message.

Masto meta; urgent 

@HerraBRE @bgcarlisle So the easiest fix is to just not use @ for adding. If the UI tries to make a username out of every word, yes that should be changed.

Masto meta; urgent 

@alsternerd The fact that there's a workaround that a user can eventually figure out doesn't mean it's not a very serious bugโ€”if this is something that new users *think* they're doing correctly and they don't get it right *the first time*, it's potentially dangerous

Sign in to participate in the conversation
Mastodon

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!